Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: p8jjOYZ6C0zI2gnbgw7I9H+NN/7QxywSan72vt6XjJQ=
Subject key identifier: B2:E0:74:5C:53:50:97:DE:E5:F2:46:5C:91:9B:8C:A2:70:59:2A:9A
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 019678692206AE5CAE96BB02752212F83928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 18:01:17 +0000
Manifest this update: Sun 27 Apr 2025 18:01:17 +0000
Manifest next update: Mon 28 Apr 2025 18:01:17 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: ewDpgqdZEuBkF02AIA3/iLrJgTGAF+Q+x+asIsRREbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:69:22:06:ae:5c:ae:96:bb:02:75:22:12:f8:39:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Apr 27 18:01:17 2025 GMT
Not After : Apr 28 18:01:17 2025 GMT
Subject: CN=b2e0745c535097dee5f2465c919b8ca270592a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:29:90:9e:54:1f:ad:c3:7d:0e:93:c4:88:
ca:bb:6a:80:4c:ac:cd:8d:d5:2a:29:35:5e:cb:41:
07:06:e5:56:46:3e:a0:ed:1b:1e:87:89:7a:a4:a0:
31:bd:c5:55:c6:48:de:f2:55:18:86:52:b3:f4:ca:
52:4e:e5:28:5f:68:06:ed:b8:81:2a:00:64:77:77:
fd:66:f0:9f:ec:91:c6:4a:53:51:95:42:82:8c:5c:
98:9d:a8:66:b7:c0:03:03:41:3e:78:4b:cd:c8:5c:
c8:bf:91:a0:4a:ea:96:91:11:19:27:9a:fc:ad:7f:
79:d6:ec:12:33:33:ca:f9:39:0b:01:84:3c:8a:e4:
59:bd:64:39:28:a2:5f:f3:0f:b7:8e:3a:6b:99:f6:
b2:86:7d:e2:95:f2:2e:68:81:a1:82:6f:9d:c3:13:
f6:bd:21:e7:e8:15:b2:a0:62:b9:ab:a0:20:1f:c2:
13:4b:c6:c7:b7:2c:9f:0f:d6:27:36:d3:0e:3c:fa:
a8:fe:20:45:3d:6b:7c:3b:bb:48:99:03:24:26:a1:
41:75:18:2b:f1:b3:7f:cd:32:6e:8c:02:ca:d5:31:
7a:7b:ff:ef:6a:f1:e0:11:c5:03:2a:fc:8a:39:e3:
79:9f:b1:af:5e:25:7f:7d:c0:3d:9b:44:6e:51:ce:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:74:5C:53:50:97:DE:E5:F2:46:5C:91:9B:8C:A2:70:59:2A:9A
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a1:22:23:36:f7:5b:c6:53:44:ec:b6:1e:b1:c7:e8:41:4d:
21:b4:3f:ef:30:78:93:bc:bf:5e:b2:df:fc:4a:ed:75:5f:b9:
4c:f8:04:1c:9e:5c:85:c4:75:1b:f7:1f:aa:9a:4b:72:80:7f:
c8:81:08:93:df:92:a1:85:b3:5b:f5:55:73:ab:5f:17:a0:63:
ab:bd:3f:5c:c7:d5:0e:46:5f:94:c4:41:65:e3:6c:f8:86:62:
fd:13:a9:d8:0d:c4:bb:5a:89:55:be:aa:2d:61:93:47:e1:f2:
bb:65:92:73:2e:90:fa:39:26:4c:24:43:53:56:a1:43:65:99:
34:7d:a7:6e:a7:12:04:18:91:6f:d8:1b:f6:d4:24:d7:b9:71:
19:0a:00:77:22:8d:22:3b:c6:20:55:a4:b5:75:30:7a:06:d4:
32:3c:13:e6:6e:9c:12:f3:a6:50:04:72:4d:c5:4e:4c:e0:64:
c4:34:44:57:91:64:3b:83:f3:53:b1:f9:2d:79:b0:ab:40:71:
da:95:01:1d:55:5d:71:05:59:96:ee:22:28:61:92:b5:f2:78:
b2:94:89:e4:75:56:30:eb:cb:b1:89:e9:20:3f:46:b1:2f:0a:
fa:ab:39:9d:7c:f0:05:42:87:61:f4:9e:be:2b:31:54:cc:8a:
8c:10:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:08:53 2025 by rpki-client